CVE-2007-4563: Medium severity Hitachi Ucosminexus Application Server Standard vulnerability

Published Aug 28, 2007
·
Updated

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

Affected Software

95 affected components
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Ucosminexus Application Server Standard=06_70_d
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi uCosminexus Service Platform=07_00
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=06_72_b
Hitachi Cosminexus Application Server Standard=06_50_f
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Standard=06_70
Hitachi Electronic Form Workflow -professional Library Set=07_00_b
Hitachi Ucosminexus Application Server Standard=07_00_1
Hitachi Ucosminexus Application Server Standard=06_70_b_1
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Standard=06_72_1
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Electronic Form Workflow - Standard Set=07_00_b
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Ucosminexus Application Server Enterprise=07_10_06
Hitachi Ucosminexus Application Server Enterprise=06_71_b
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Cosminexus Application Server Enterprise=06_50_c_1
Hitachi Cosminexus Application Server Standard=06_51_b_1
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Cosminexus Application Server Standard=06_50_e_1
Hitachi Ucosminexus Application Server Standard=06_71
Hitachi Ucosminexus Application Server Enterprise=06_72_1
Hitachi Cosminexus Application Server Enterprise=06_50_e_1
Hitachi Ucosminexus Application Server Enterprise=06_70
Hitachi Ucosminexus Application Server Enterprise=07_00_12
Hitachi Cosminexus Application Server Enterprise=06_51_b_1
Hitachi Ucosminexus Application Server Enterprise=06_70_b_1
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Cosminexus Application Server Standard=06_50_c_1
Hitachi Ucosminexus Application Server Enterprise=07_10_08
Hitachi Ucosminexus Application Server Enterprise=06_71_b
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Standard=06_72_g
Hitachi Cosminexus Application Server Standard=06_51_c
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Cosminexus Application Server Standard=06_50_c_1
Hitachi Ucosminexus Application Server Enterprise=06_71_c
Hitachi Cosminexus Application Server Enterprise=06_51_c
Hitachi Ucosminexus Application Server Enterprise=07_10_1
Hitachi Ucosminexus Application Server Enterprise=06_70_a
Hitachi Cosminexus Application Server Enterprise=06_50_f
Hitachi Cosminexus Application Server Standard=06_50_c
Hitachi Electronic Form Workflow - Standard Set=07_00
Hitachi Cosminexus Application Server Enterprise=06_50_b
Hitachi Ucosminexus Application Server Standard=06_72_c
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Ucosminexus Application Server Enterprise=07-00-01
Hitachi Cosminexus Application Server Enterprise=06_50_c
Hitachi Ucosminexus Application Server Enterprise=06_71
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi uCosminexus Service Platform=07_10
Hitachi Ucosminexus Application Server Standard=06_72_b_1
Hitachi Ucosminexus Application Server Enterprise=06_72_b
Hitachi Ucosminexus Application Server Enterprise=06_70
Hitachi Electronic Form Workflow -professional Library Set=07_00
Hitachi Cosminexus Application Server Standard=06_51
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Standard=06_70_c
Hitachi uCosminexus Service Platform=07_10
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Cosminexus Application Server Enterprise=06_51
Hitachi Ucosminexus Application Server Standard=06_72_d
Hitachi Ucosminexus Application Server Enterprise=06_70_a
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Cosminexus Application Server Enterprise=06_50_c_1
Hitachi Ucosminexus Application Server Standard=06_71_b
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Enterprise=06_70_d
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Standard=06_70_a
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=06_70_g
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Ucosminexus Application Server Enterprise=06_72_g
Hitachi Cosminexus Application Server Standard=06_51
Hitachi Ucosminexus Application Server Standard=06_70_a
Hitachi Cosminexus Application Server Standard=06_50_b

Remediation

Patch Available

http://secunia.com/advisories/26589

Patch Available

http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html

Patch Available

http://www.securityfocus.com/bid/25434

Event History

Aug 28, 2007
CVE Published
01:17 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-4563?

CVE-2007-4563 is classified as a high severity vulnerability due to its potential to allow local users to gain elevated privileges.

2

How do I fix CVE-2007-4563?

To mitigate CVE-2007-4563, it is recommended to apply patches provided by Hitachi for the affected versions of the Cosminexus Application Server.

3

What systems are affected by CVE-2007-4563?

CVE-2007-4563 affects various versions of the Hitachi Cosminexus Application Server, including versions 06-50 and later.

4

What kind of vulnerability is CVE-2007-4563?

CVE-2007-4563 is a local privilege escalation vulnerability that impacts user group permissions.

5

Who reported CVE-2007-4563?

CVE-2007-4563 was publicly disclosed as a result of security research and is documented in the vulnerability database.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203